# cve.now: Palo Alto PAN-OS

The newest entries affecting Palo Alto PAN-OS (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-0314](https://cve.now/CVE-2026-0314.md): GlobalProtect App: Local Denial of Service (DoS) on Windows (CVSS 4.3, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0315](https://cve.now/CVE-2026-0315.md): GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (CVSS 5.9, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0316](https://cve.now/CVE-2026-0316.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (CVSS 1.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0317](https://cve.now/CVE-2026-0317.md): PAN-OS: Denial of Service Vulnerability (CVSS 1.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0318](https://cve.now/CVE-2026-0318.md): PAN-OS: Denial of Service (DoS) on Panorama (CVSS 4.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0319](https://cve.now/CVE-2026-0319.md): PAN-OS: Improper Input Handling Vulnerability (CVSS 4.9, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0320](https://cve.now/CVE-2026-0320.md): PAN-OS: Authenticated Admin Command Injection Vulnerability (CVSS 6.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0321](https://cve.now/CVE-2026-0321.md): PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0322](https://cve.now/CVE-2026-0322.md): PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (CVSS 8.6, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0307](https://cve.now/CVE-2026-0307.md): GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 5.9, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0308](https://cve.now/CVE-2026-0308.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 1.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0309](https://cve.now/CVE-2026-0309.md): PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (CVSS 4.0, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0310](https://cve.now/CVE-2026-0310.md): PAN-OS: Buffer Overflow Vulnerability via XML Processing (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0301](https://cve.now/CVE-2026-0301.md): PAN-OS: Information Disclosure Vulnerability in URL Filtering (CVSS 1.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0299](https://cve.now/CVE-2026-0299.md): GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 5.9, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0298](https://cve.now/CVE-2026-0298.md): GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0297](https://cve.now/CVE-2026-0297.md): GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0296](https://cve.now/CVE-2026-0296.md): GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (CVSS 4.5, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0295](https://cve.now/CVE-2026-0295.md): GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (CVSS 4.1, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0279](https://cve.now/CVE-2026-0279.md): PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (CVSS 1.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0280](https://cve.now/CVE-2026-0280.md): PAN-OS: IPv6 Firewall Policy Bypass (CVSS 1.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +2)
- [CVE-2026-0281](https://cve.now/CVE-2026-0281.md): PAN-OS: Information Disclosure Vulnerability in Management Web Interface (CVSS 2.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0282](https://cve.now/CVE-2026-0282.md): PAN-OS: File Deletion Vulnerability in Management Web Interface (CVSS 2.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0283](https://cve.now/CVE-2026-0283.md): PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) (CVSS 4.5, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0284](https://cve.now/CVE-2026-0284.md): PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) (CVSS 4.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0285](https://cve.now/CVE-2026-0285.md): PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (CVSS 4.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0286](https://cve.now/CVE-2026-0286.md): PAN-OS: Authenticated Command Injection in CLI (CVSS 6.0, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0287](https://cve.now/CVE-2026-0287.md): PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0288](https://cve.now/CVE-2026-0288.md): PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0273](https://cve.now/CVE-2026-0273.md): PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI (CVSS 6.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0272](https://cve.now/CVE-2026-0272.md): PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) (CVSS 6.0, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0269](https://cve.now/CVE-2026-0269.md): PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing (CVSS 4.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +2)
- [CVE-2026-0267](https://cve.now/CVE-2026-0267.md): GlobalProtect App: Information Exposure Vulnerability on macOS (CVSS 4.4, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2026-0266](https://cve.now/CVE-2026-0266.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 1.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0249](https://cve.now/CVE-2026-0249.md): GlobalProtect App: Certificate Validation Bypass Vulnerabilities (CVSS 4.9, Palo Alto Networks GlobalProtect App)
- [CVE-2026-0250](https://cve.now/CVE-2026-0250.md): GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (CVSS 5.2, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2026-0251](https://cve.now/CVE-2026-0251.md): GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 5.9, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2026-0256](https://cve.now/CVE-2026-0256.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 4.4, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0257](https://cve.now/CVE-2026-0257.md): PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities (CVSS 7.8, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0258](https://cve.now/CVE-2026-0258.md): PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching (CVSS 4.8, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0261](https://cve.now/CVE-2026-0261.md): PAN-OS: Authenticated Admin Command Injection Vulnerability (CVSS 6.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0262](https://cve.now/CVE-2026-0262.md): PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0263](https://cve.now/CVE-2026-0263.md): PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0264](https://cve.now/CVE-2026-0264.md): PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0265](https://cve.now/CVE-2026-0265.md): PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0300](https://cve.now/CVE-2026-0300.md): PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (CVSS 9.3, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0229](https://cve.now/CVE-2026-0229.md): PAN-OS: Denial of Service in Advanced DNS Security Feature (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0228](https://cve.now/CVE-2026-0228.md): PAN-OS: Improper Validation of Terminal Server Agent Certificate (CVSS 1.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-0227](https://cve.now/CVE-2026-0227.md): PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4619](https://cve.now/CVE-2025-4619.md): PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4615](https://cve.now/CVE-2025-4615.md): PAN-OS: Improper Neutralization of Input in the Management Web Interface (CVSS 5.4, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4614](https://cve.now/CVE-2025-4614.md): PAN-OS: Session Token Disclosure Vulnerability (CVSS 4.8, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-2183](https://cve.now/CVE-2025-2183.md): GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation (CVSS 5.3, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-2182](https://cve.now/CVE-2025-2182.md): PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK) (CVSS 5.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-2179](https://cve.now/CVE-2025-2179.md): GlobalProtect App: Non Admin User Can Disable the GlobalProtect App (CVSS 6.8, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0141](https://cve.now/CVE-2025-0141.md): GlobalProtect App: Privilege Escalation (PE) Vulnerability (CVSS 8.4, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0140](https://cve.now/CVE-2025-0140.md): GlobalProtect App: Non Admin User Can Disable the GlobalProtect App (CVSS 6.8, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-4227](https://cve.now/CVE-2025-4227.md): GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement (CVSS 1.0, Palo Alto Networks GlobalProtect App)
- [CVE-2025-4229](https://cve.now/CVE-2025-4229.md): PAN-OS: Traffic Information Disclosure Vulnerability (CVSS 6.0, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4230](https://cve.now/CVE-2025-4230.md): PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI (CVSS 8.4, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4231](https://cve.now/CVE-2025-4231.md): PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface (CVSS 8.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4232](https://cve.now/CVE-2025-4232.md): GlobalProtect: Authenticated Code Injection Through Wildcard on macOS (CVSS 8.5, Palo Alto Networks GlobalProtect App)
- [CVE-2025-0136](https://cve.now/CVE-2025-0136.md): PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices (CVSS 5.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0137](https://cve.now/CVE-2025-0137.md): PAN-OS: Improper Neutralization of Input in the Management Web Interface (CVSS 4.8, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS)
- [CVE-2025-0135](https://cve.now/CVE-2025-0135.md): GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App (CVSS 5.2, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0133](https://cve.now/CVE-2025-0133.md): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal (CVSS 1.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0130](https://cve.now/CVE-2025-0130.md): PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets (CVSS 8.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0123](https://cve.now/CVE-2025-0123.md): PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures (CVSS 5.9, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0128](https://cve.now/CVE-2025-0128.md): PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet (CVSS 8.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0127](https://cve.now/CVE-2025-0127.md): PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series (CVSS 7.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0126](https://cve.now/CVE-2025-0126.md): PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login (CVSS 8.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0125](https://cve.now/CVE-2025-0125.md): PAN-OS: Improper Neutralization of Input in the Management Web Interface (CVSS 6.9, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0124](https://cve.now/CVE-2025-0124.md): PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface (CVSS 5.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0120](https://cve.now/CVE-2025-0120.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.1, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0118](https://cve.now/CVE-2025-0118.md): GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability (CVSS 6.0, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0117](https://cve.now/CVE-2025-0117.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.1, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0116](https://cve.now/CVE-2025-0116.md): PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame (CVSS 6.8, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2025-0115](https://cve.now/CVE-2025-0115.md): PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI (CVSS 6.8, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2025-0114](https://cve.now/CVE-2025-0114.md): PAN-OS: Denial of Service (DoS) in GlobalProtect (CVSS 8.2, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2025-0110](https://cve.now/CVE-2025-0110.md): PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig Plugin (CVSS 8.6, Palo Alto Networks PAN-OS OpenConfig Plugin)
- [CVE-2025-0111](https://cve.now/CVE-2025-0111.md): PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface (CVSS 7.1, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0109](https://cve.now/CVE-2025-0109.md): PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface (CVSS 6.9, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0108](https://cve.now/CVE-2025-0108.md): PAN-OS: Authentication Bypass in the Management Web Interface (CVSS 8.8, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-0107](https://cve.now/CVE-2025-0107.md): Expedition: OS Command Injection Vulnerability (CVSS 7.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3)
- [CVE-2025-0106](https://cve.now/CVE-2025-0106.md): Expedition: Wildcard Expansion Vulnerability (CVSS 6.9, Palo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3)
- [CVE-2025-0105](https://cve.now/CVE-2025-0105.md): Expedition: Arbitrary File Deletion Vulnerability (CVSS 6.9, Palo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3)
- [CVE-2025-0104](https://cve.now/CVE-2025-0104.md): Expedition: Cross-Site Scripting (XSS) Vulnerability (CVSS 7.0, Palo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3)
- [CVE-2025-0103](https://cve.now/CVE-2025-0103.md): Expedition: SQL Injection Vulnerability (CVSS 9.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks Exped… +3)
- [CVE-2024-3393](https://cve.now/CVE-2024-3393.md): PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet (CVSS 8.7, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS)
- [CVE-2024-5921](https://cve.now/CVE-2024-5921.md): GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation (CVSS 6.0, Palo Alto Networks GlobalProtect App)
- [CVE-2024-9474](https://cve.now/CVE-2024-9474.md): PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface (CVSS 6.9, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-0012](https://cve.now/CVE-2024-0012.md): PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) (CVSS 9.3, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-2550](https://cve.now/CVE-2024-2550.md): PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet (CVSS 8.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-5920](https://cve.now/CVE-2024-5920.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator (CVSS 4.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-5917](https://cve.now/CVE-2024-5917.md): PAN-OS: Server-Side Request Forgery in WildFire (CVSS 2.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS)
- [CVE-2024-2552](https://cve.now/CVE-2024-2552.md): PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI) (CVSS 6.8, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-5918](https://cve.now/CVE-2024-5918.md): PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User (CVSS 5.3, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-5919](https://cve.now/CVE-2024-5919.md): PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability (CVSS 5.1, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-2551](https://cve.now/CVE-2024-2551.md): PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet (CVSS 8.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-9472](https://cve.now/CVE-2024-9472.md): PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic (CVSS 8.7, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-9473](https://cve.now/CVE-2024-9473.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2024-9471](https://cve.now/CVE-2024-9471.md): PAN-OS: Privilege Escalation (PE) Vulnerability in XML API (CVSS 5.1, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-9468](https://cve.now/CVE-2024-9468.md): PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet (CVSS 8.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2024-8691](https://cve.now/CVE-2024-8691.md): PAN-OS: User Impersonation in GlobalProtect Portal (CVSS 5.3, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-8688](https://cve.now/CVE-2024-8688.md): PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) (CVSS 6.7, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-8687](https://cve.now/CVE-2024-8687.md): PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes (CVSS 6.9, Palo Alto Networks PAN-OS · Palo Alto Networks GlobalPro… +2)
- [CVE-2024-8686](https://cve.now/CVE-2024-8686.md): PAN-OS: Command Injection Vulnerability (CVSS 8.6, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-5916](https://cve.now/CVE-2024-5916.md): PAN-OS: Cleartext Exposure of External System Secrets (CVSS 6.0, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-5915](https://cve.now/CVE-2024-5915.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 5.2, Palo Alto Networks GlobalProtect App)
- [CVE-2024-5913](https://cve.now/CVE-2024-5913.md): PAN-OS: Improper Input Validation Vulnerability in PAN-OS (CVSS 6.1, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-5911](https://cve.now/CVE-2024-5911.md): PAN-OS: File Upload Vulnerability in the Panorama Web Interface (CVSS 7.0, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-5908](https://cve.now/CVE-2024-5908.md): GlobalProtect App: Encrypted Credential Exposure via Log Files (CVSS 5.5, Palo Alto Networks GlobalProtect App)
- [CVE-2024-3400](https://cve.now/CVE-2024-3400.md): PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect (CVSS 10.0, KEV, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3388](https://cve.now/CVE-2024-3388.md): PAN-OS: User Impersonation in GlobalProtect SSL VPN (CVSS 4.1, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3387](https://cve.now/CVE-2024-3387.md): PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure (CVSS 5.3, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3386](https://cve.now/CVE-2024-3386.md): PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended (CVSS 5.3, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3385](https://cve.now/CVE-2024-3385.md): PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled (CVSS 7.5, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3384](https://cve.now/CVE-2024-3384.md): PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets (CVSS 7.5, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3383](https://cve.now/CVE-2024-3383.md): PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) (CVSS 7.4, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-3382](https://cve.now/CVE-2024-3382.md): PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets (CVSS 7.5, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-2433](https://cve.now/CVE-2024-2433.md): PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss (CVSS 4.3, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2024-2432](https://cve.now/CVE-2024-2432.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 4.5, Palo Alto Networks GlobalProtect App)
- [CVE-2024-2431](https://cve.now/CVE-2024-2431.md): GlobalProtect App: Local User Can Disable GlobalProtect (CVSS 5.5, Palo Alto Networks GlobalProtect App)
- [CVE-2024-0011](https://cve.now/CVE-2024-0011.md): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication (CVSS 4.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0010](https://cve.now/CVE-2024-0010.md): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal (CVSS 4.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0009](https://cve.now/CVE-2024-0009.md): PAN-OS: Improper IP Address Verification in GlobalProtect Gateway (CVSS 6.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0008](https://cve.now/CVE-2024-0008.md): PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface (CVSS 6.6, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0007](https://cve.now/CVE-2024-0007.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface (CVSS 6.8, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6793](https://cve.now/CVE-2023-6793.md): PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator (CVSS 2.7, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6791](https://cve.now/CVE-2023-6791.md): PAN-OS: Plaintext Disclosure of External System Integration Credentials (CVSS 4.9, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6789](https://cve.now/CVE-2023-6789.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 4.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6795](https://cve.now/CVE-2023-6795.md): PAN-OS: OS Command Injection Vulnerability in the Web Interface (CVSS 5.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6794](https://cve.now/CVE-2023-6794.md): PAN-OS: File Upload Vulnerability in the Web Interface (CVSS 5.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6792](https://cve.now/CVE-2023-6792.md): PAN-OS: OS Command Injection Vulnerability in the XML API (CVSS 5.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-6790](https://cve.now/CVE-2023-6790.md): PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 8.8, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-38046](https://cve.now/CVE-2023-38046.md): PAN-OS: Read System Files and Resources During Configuration Commit (CVSS 5.5, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2023-0009](https://cve.now/CVE-2023-0009.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.8, Palo Alto Networks GlobalProtect App)
- [CVE-2023-0010](https://cve.now/CVE-2023-0010.md): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication (CVSS 5.4, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2023-0008](https://cve.now/CVE-2023-0008.md): PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface (CVSS 4.4, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-0007](https://cve.now/CVE-2023-0007.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface (CVSS 6.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-0006](https://cve.now/CVE-2023-0006.md): GlobalProtect App: Local File Deletion Vulnerability (CVSS 6.3, Palo Alto Networks GlobalProtect app)
- [CVE-2023-0005](https://cve.now/CVE-2023-0005.md): PAN-OS: Exposure of Sensitive Information Vulnerability (CVSS 4.1, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-0004](https://cve.now/CVE-2023-0004.md): PAN-OS: Local File Deletion Vulnerability (CVSS 6.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2022-0030](https://cve.now/CVE-2022-0030.md): PAN-OS: Authentication Bypass in Web Interface (CVSS 8.1, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2022-0028](https://cve.now/CVE-2022-0028.md): PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (CVSS 8.6, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2022-0024](https://cve.now/CVE-2022-0024.md): PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2022-0023](https://cve.now/CVE-2022-0023.md): PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy (CVSS 5.9, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2022-0022](https://cve.now/CVE-2022-0022.md): PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes (CVSS 4.1, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2022-0021](https://cve.now/CVE-2022-0021.md): GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon (CVSS 3.3, Palo Alto Networks GlobalProtect App)
- [CVE-2022-0019](https://cve.now/CVE-2022-0019.md): GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux (CVSS 4.7, Palo Alto Networks GlobalProtect App)
- [CVE-2022-0018](https://cve.now/CVE-2022-0018.md): GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled (CVSS 6.1, Palo Alto Networks GlobalProtect App)
- [CVE-2022-0017](https://cve.now/CVE-2022-0017.md): GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation (CVSS 7.0, Palo Alto Networks GlobalProtect App)
- [CVE-2022-0016](https://cve.now/CVE-2022-0016.md): GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon (CVSS 7.4, Palo Alto Networks GlobalProtect App)
- [CVE-2022-0011](https://cve.now/CVE-2022-0011.md): PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering (CVSS 6.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3064](https://cve.now/CVE-2021-3064.md): PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces (CVSS 9.8, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3063](https://cve.now/CVE-2021-3063.md): PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces (CVSS 7.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3062](https://cve.now/CVE-2021-3062.md): PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users (CVSS 8.1, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3061](https://cve.now/CVE-2021-3061.md): PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) (CVSS 6.4, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3060](https://cve.now/CVE-2021-3060.md): PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) (CVSS 8.1, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3059](https://cve.now/CVE-2021-3059.md): PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates (CVSS 8.1, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3058](https://cve.now/CVE-2021-3058.md): PAN-OS: OS Command Injection Vulnerability in Web Interface XML API (CVSS 8.8, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3056](https://cve.now/CVE-2021-3056.md): PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication (CVSS 8.8, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access)
- [CVE-2021-3057](https://cve.now/CVE-2021-3057.md): GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway (CVSS 8.1, Palo Alto Networks GlobalProtect App)
- [CVE-2021-3055](https://cve.now/CVE-2021-3055.md): PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface (CVSS 6.5, Palo Alto Networks PAN-OS)
- [CVE-2021-3054](https://cve.now/CVE-2021-3054.md): PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2021-3053](https://cve.now/CVE-2021-3053.md): PAN-OS: Exceptional Condition Denial-of-Service (DoS) (CVSS 7.5, Palo Alto Networks PAN-OS)
- [CVE-2021-3052](https://cve.now/CVE-2021-3052.md): PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface (CVSS 8.0, Palo Alto Networks PAN-OS)
- [CVE-2021-3050](https://cve.now/CVE-2021-3050.md): PAN-OS: OS Command Injection Vulnerability in Web Interface (CVSS 8.8, Palo Alto Networks PAN-OS)
- [CVE-2021-3048](https://cve.now/CVE-2021-3048.md): PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage (CVSS 5.9, Palo Alto Networks PAN-OS)
- [CVE-2021-3047](https://cve.now/CVE-2021-3047.md): PAN-OS: Weak Cryptography Used in Web Interface Authentication (CVSS 4.2, Palo Alto Networks PAN-OS)
- [CVE-2021-3046](https://cve.now/CVE-2021-3046.md): PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal (CVSS 6.8, Palo Alto Networks PAN-OS)
- [CVE-2021-3045](https://cve.now/CVE-2021-3045.md): PAN-OS: OS Command Argument Injection in Web Interface (CVSS 4.9, Palo Alto Networks PAN-OS)
- [CVE-2021-3038](https://cve.now/CVE-2021-3038.md): GlobalProtect App: Windows VPN kernel driver denial of service (DoS) (CVSS 5.5, Palo Alto Networks GlobalProtect App)
- [CVE-2021-3037](https://cve.now/CVE-2021-3037.md): PAN-OS: Secrets for scheduled configuration exports are logged in system logs (CVSS 2.3, Palo Alto Networks PAN-OS)
- [CVE-2021-3036](https://cve.now/CVE-2021-3036.md): PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly (CVSS 4.4, Palo Alto Networks PAN-OS)
- [CVE-2021-3032](https://cve.now/CVE-2021-3032.md): PAN-OS: Configuration secrets for log forwarding may be logged in system logs (CVSS 4.4, Palo Alto Networks PAN-OS)
- [CVE-2021-3031](https://cve.now/CVE-2021-3031.md): PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) (CVSS 4.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2050](https://cve.now/CVE-2020-2050.md): PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification (CVSS 8.2, Palo Alto Networks PAN-OS)
- [CVE-2020-2048](https://cve.now/CVE-2020-2048.md): PAN-OS: System proxy passwords may be logged in clear text while viewing system state (CVSS 3.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2022](https://cve.now/CVE-2020-2022.md): PAN-OS: Panorama session disclosure during context switch into managed device (CVSS 7.5, Palo Alto Networks PAN-OS)
- [CVE-2020-2000](https://cve.now/CVE-2020-2000.md): PAN-OS: OS command injection and memory corruption vulnerability (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-1999](https://cve.now/CVE-2020-1999.md): PAN-OS: Threat signatures are evaded by specifically crafted packets (CVSS 5.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2044](https://cve.now/CVE-2020-2044.md): PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history (CVSS 3.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2043](https://cve.now/CVE-2020-2043.md): PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs (CVSS 3.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2042](https://cve.now/CVE-2020-2042.md): PAN-OS: Buffer overflow in the management web interface (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-2041](https://cve.now/CVE-2020-2041.md): PAN-OS: Management web interface denial-of-service (DoS) (CVSS 7.5, Palo Alto Networks PAN-OS)
- [CVE-2020-2040](https://cve.now/CVE-2020-2040.md): PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled (CVSS 9.8, Palo Alto Networks PAN-OS)
- [CVE-2020-2039](https://cve.now/CVE-2020-2039.md): PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload (CVSS 5.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2038](https://cve.now/CVE-2020-2038.md): PAN-OS: OS command injection vulnerability in the management web interface (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-2037](https://cve.now/CVE-2020-2037.md): PAN-OS: OS command injection vulnerability in the management web interface (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-2036](https://cve.now/CVE-2020-2036.md): PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface (CVSS 8.8, Palo Alto Networks PAN-OS)
- [CVE-2020-2035](https://cve.now/CVE-2020-2035.md): PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions (CVSS 3.0, Palo Alto Networks PAN-OS)
- [CVE-2020-2034](https://cve.now/CVE-2020-2034.md): PAN-OS: OS command injection vulnerability in GlobalProtect portal (CVSS 8.1, Palo Alto Networks PAN-OS)
- [CVE-2020-2031](https://cve.now/CVE-2020-2031.md): PAN-OS: Integer underflow in the management interface (CVSS 4.9, Palo Alto Networks PAN-OS)
- [CVE-2020-2030](https://cve.now/CVE-2020-2030.md): PAN-OS: OS command injection vulnerability in the management interface (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-1982](https://cve.now/CVE-2020-1982.md): PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services (CVSS 4.8, Palo Alto Networks PAN-OS)
- [CVE-2020-2021](https://cve.now/CVE-2020-2021.md): PAN-OS: Authentication Bypass in SAML Authentication (CVSS 10.0, KEV, Palo Alto Networks PAN-OS)
- [CVE-2020-2033](https://cve.now/CVE-2020-2033.md): GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie (CVSS 5.3, Palo Alto Networks GlobalProtect App)
- [CVE-2020-2032](https://cve.now/CVE-2020-2032.md): GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade (CVSS 7.0, Palo Alto Networks GlobalProtect App)
- [CVE-2020-2029](https://cve.now/CVE-2020-2029.md): PAN-OS: OS command injection vulnerability in management interface certificate generator (CVSS 7.2, Palo Alto Networks PAN-OS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/palo-alto-panos
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.